GDPR Regulations
under review
Nicolas Giard
Merged in a post:
Cookie Warning
I
Innosflew
It would be nice to have an Cookie Warning option in the settings in case someone wants to inform visitors if they are using cookies. This would be pretty useful since the European Union requires by law to inform and ask the consent of the visitors to your site about cookies.
Frans Irgolitsch
Is there any update on this? It's becoming a requirement in more places than just EU countries at the moment. We are using WikiJS to host a public website for our group within a University in Canada but they have now started requiring cookie banners. We're forced to stop using WikiJS if we can't implement this, which would be a shame.
Nicolas Giard
updated the status to
under review
A
Anth0rx
In addition to the cookie notice, the GDPR also requires the "pseudonymization and encryption of personal data" in Art. 32. Are there plans to fulfill this requirement in a future release?
Nicolas Giard
Anth0rx: That's not relevant. The article you're referring to is merely a suggestion of possible actions to protect the user data. Pseudonymization doesn't make any sense for a wiki and encrypting the data before manipulating the database wouldn't add any useful security and significantly increase complexity.
A
Anth0rx
Nicolas Giard: Thanks for your quick response. I thought those points were requirements.
DWAK
If this is added, please also include a way to turn it off. We use WikiJS for internal documentation and absolutely would not want to hit the cookie nag screen all the time.
Co Sci
usefull and needed, especially if you add tracking/analytics
Csaba Madarász
is there anything with this?
KrakenFuego
I add it by default to every site even if it isn't using cookies - its just a standard cover my backside warning at this point.
Nicolas Giard
As I understand it, the law (http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm#section_2) exempts cookies that are categorized as essential to the site, such as authentication cookies, which is the only cookie generated by wiki.js.
So unless you plan on putting ads, additional tracking, etc. (which is out of scope of the wiki app), this banner is not required.
I
Innosflew
Nicolas Giard: I was thinking about third‑party social plug‑ins and widgets, but according to what you linked they seem to exempt from the law. Although, I'm not sure if stuff like google analytics is exempt or not.
N. T.
Innosflew: I also bumped into the same question. I know this is an old post but here are my two cents. You are right about that third-party stuff like google analytics is not exempted and even using a CDN (like cloudflare in my case) is not. Therefore, I will suggest to add a banner to be on the safer side.
Even third-party comment services need to be the part of cookie and privacy policies.
P
Peter Uithoven
N. T. If I don't add analytics that require cookie approval I don't want to bother visitors with banners.
Also note that there are lot's of analytics solutions, like Plausible or Matomo with the right config that don't require cookie approval.
Side note, you might want to use these for your user to improve their privacy anyway.
I'm not sure whether certain CDN's would require cookie approvals.
But don't just bother the visitor to be on the safe side.